CVE-2024-49350

7.5 highEPSS 0.4%

High (7.5) in ibm db2. EPSS 0.4% chance of exploitation in the next 30 days.

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-121
Published: 2025-05-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:db2

References

https://www.ibm.com/support/pages/node/7235069

Check your stack JSON